Timeline for Can a DDoS attack yield any information?
Current License: CC BY-SA 3.0
8 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Aug 12, 2016 at 19:50 | comment | added | stephenbayer | It could be used in combination with other attacks and vulnerabilities as a path to gain more information. IP spoofing is a way to gain access to information that is secured to internal users. Much of the time, the IP being spoofed has to be disabled so it doesn't return RCT saying "Hey this data isn't from me". disabling would be done by some sort of DOS attack. | |
| Aug 12, 2016 at 17:35 | comment | added | TessellatingHeckler | @DeanMacGregor yes; here is an account of someone finding a discussion forum login cookies were made with a weak random number generator, seeded by the time the service started, and them crashing the server with a DoS to gain knowledge of the time it restarted and therefore be able to predict the random numbers protecting login cookies and take over other people's sessions: news.ycombinator.com/item?id=639976 | |
| Aug 11, 2016 at 13:03 | vote | accept | KosugiNinja | ||
| Aug 10, 2016 at 18:25 | comment | added | Mark | @DeanMacGregor, that was popular back in the wild-west days of IRC: since authentication was strapped on to IRC well after the protocol was developed, channel and user names were a matter of "first come, first served". There were a number of attacks that involved knocking a server or a user offline, then connecting to another part of the network to make your use of the name the oldest. | |
| Aug 10, 2016 at 14:58 | comment | added | Sebb | @DeanMacGregor Theoretically yes, but practically its unlikely. Any load balancer will only redirect to a fully booted node, a firewall that's down won't route anything anywere etc. If you have a single, badly configured application server thats not secure without a special filter (like mod_security) but works without it, then it may be possible, but that is really unusual. | |
| Aug 10, 2016 at 14:00 | comment | added | Rory Alsop♦ | I guess that could theoretically be true - not sure how possible in practice :-) | |
| Aug 10, 2016 at 13:59 | comment | added | Dean MacGregor | I could easily be misremembering or attributing to fiction but it seems as though I've read that DDoS attacks are sometimes the beginning of cracking a system. For instance, DDoS some server forcing reboot and then attack some weak point before all services have started. | |
| Aug 10, 2016 at 9:43 | history | answered | Rory Alsop♦ | CC BY-SA 3.0 |